tmphsgzkejk

General

Target
tmphsgzkejk
Size 197KB
Sample260601-sd7n3ah13p
SHA256 0e44b46f0b1967116763f10477967fd4be81b634237e97769f3a06ee7ae7de21
MD5 50b200db10bbde680414fb73ae9265bc
SHA1 09baec5dda9793f87043c26d6f3cbe4de98684f5
SHA512 121f49bdef195f17f67ed54bb944120efe97417f5d8fafb9eebb21b218378e0453c19356d935bc5cbe0c74bfa865cad8840ca815f89513be2e582d936eb59569
SSDEEP 3072:+yw8DKSyVeCqtncOIw6wsw3mkRqer5+ncloOZ4FoVRi:LKSZ4w6LSqer5+nDFo3i
TLSH
T1AA14590E36A5D4E2D4324E3098708691573B7C537E6026AB6AD4370FAD772F88E36B71
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmphsgzkejk

File Explorer

tmphsgzkejk

.exe 197KB

IMPHASH 84167daac0237fd02af149e765b2b338
SHA256 0e44b46f0b1967116763f10477967fd4be81b634237e97769f3a06ee7ae7de21
MD5 50b200db10bbde680414fb73ae9265bc
SHA1 09baec5dda9793f87043c26d6f3cbe4de98684f5
SHA512 121f49bdef195f17f67ed54bb944120efe97417f5d8fafb9eebb21b218378e0453c19356d935bc5cbe0c74bfa865cad8840ca815f89513be2e582d936eb59569
SSDEEP 3072:+yw8DKSyVeCqtncOIw6wsw3mkRqer5+ncloOZ4FoVRi:LKSZ4w6LSqer5+nDFo3i
TLSH
T1AA14590E36A5D4E2D4324E3098708691573B7C537E6026AB6AD4370FAD772F88E36B71
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

9171

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

ord17 PropertySheetA

kernel32

LoadLibraryExW GetCurrentProcess VirtualAllocExNuma SizeofResource GetVersionExA GetStringTypeW MultiByteToWideChar LCMapStringW LoadResource IsValidCodePage GetOEMCP GetACP GetCPInfo LoadLibraryW HeapSize Sleep RtlUnwind EnterCriticalSection FindResourceA HeapReAlloc GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetLastError HeapFree IsProcessorFeaturePresent EncodePointer DecodePointer GetProcAddress GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection

user32

DestroyWindow GetMessageA RegisterClassExA PostQuitMessage GetParent LoadIconA SendMessageA TranslateMessage CreateWindowExA EndDialog DefWindowProcA ShowWindow IsWindow PostMessageA DispatchMessageA UpdateWindow EnableWindow LoadCursorA DialogBoxParamA RegisterClassA

gdi32

GetStockObject

Sharing